8103 matches found
Barracuda Load Balancer ADC Key Recovery / Password Reset Vulnerabilities
Barracuda Load Balancer ADC with firmware version 5.0.0.015 suffers from multiple security issues. There is an ability to recover the file system encryption keys via simil cold-boot attack, an off-line super user password reset via physical attack, hard-coded credential and hard-coded ssh key...
WordPress Plugin Pie Register 2.0.13 - Privilege Escalation
WordPress Plugin Pie Register 2.0.13 - Privilege Escalation Exploit Title: Pie Register 2.0.13 Privilege escalation Date: 16-10-2014 Software Link: https://wordpress.org/plugins/pie-register/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl...
Multiple SQL Injection Vulnerabilities in Redaxscript 'includes/password.php'
RedAxScript is a free content management system. Multiple SQL injection vulnerabilities exist in Redaxscript version 0.3.2 includes/password.php. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands by passing the id or password parameter to the passwordreset program...
Zappos Settles with Nine States Following Data Breach
Online retailer Zappos this week settled with attorneys general in nine states, agreeing to pay out $106,000 stemming from a data breach in 2012 that exposed 24 million customers’ information. Massachusetts Attorney General Martha Coakley filed the settlement in Suffolk Superior Court on Wednesda...
Vimeo: Vimeo.com Insecure Direct Object References Reset Password
Hello, my name is Toufik Airane. This is Responsible Disclosure and Silent Disclosure. Thanks you to opened bug bounty program! Please find a proof of concept for IDOR attack on famous vimeo.com. With this IDOR, attacker can reset any password, of any account and take controle of it. Please, find...
SweetRice CMS Password Reset Vulnerability
SweetRice is a simple content management system developed using PHP. A password reset vulnerability in as/index.php in SweetRice CMS versions prior to 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's email address in the email parameter...
CVE-2010-5318
The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's e-mail address in the email parameter...
Design/Logic Flaw
The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's e-mail address in the email parameter...
CVE-2010-5318
CVE-2010-5318 affects SweetRice CMS prior to version 0.6.7.1. The vulnerability resides in the password-reset feature of as/index.php, where remote attackers can modify the administrator password by supplying the administrator’s email address in the email parameter. No exploit details are provide...
CVE-2010-5318
The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's e-mail address in the email parameter...
CVE-2011-5313
Multiple SQL injection vulnerabilities in includes/password.php in Redaxscript 0.3.2 allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 password parameter to the passwordreset program...
WSS is the latest version of any user of the password reset（official demo demo-the vulnerability warning-the black bar safety net
WSS latest version of the design flaws lead to arbitrary user password reset, including the administrator 文件 usereditpassword.php code area ? php $editFormAction = $SERVER'PHPSELF'; if isset$SERVER'QUERYSTRING' $editFormAction .= "?" . htmlentities$SERVER'QUERYSTRING'; $password = "-1"; if...
Humhub Insecure Password Validation / Reset
Humhub insecure password validation and reset design + Discovered by: Jos Wetzels + Affects: Humhub password == $this-hashPassword$password Here a hash of the user-supplied password gets compared to the stored hash in an insecure manner, since PHP's loose type comparison operators compare only...
CVE-2014-8270
BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset...
Design/Logic Flaw
BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset...
CVE-2014-8270
BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset...
CVE-2014-8270
CVE-2014-8270 details (supported by connected docs): BMC Track-It! 11.3 (and possibly earlier) contains a flaw in its password reset mechanism that can be exploited remotely to gain privileges and execute arbitrary code. An attacker can create an account whose name matches a local system account ...
BMC TrackIt! Unauthenticated Arbitrary User Password Change
This module exploits a flaw in the password reset mechanism in BMC TrackIt! 11.3 and possibly prior versions. If the password reset service is configured to use a domain administrator which is the recommended configuration, then domain credentials can be reset such as domain Administrator. Module...
PT-2014-8443 · Bmc · Bmc Track-It!
Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 11.3 Description: The issue allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset. This is relate...
